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We propose a quantum communication protocol that can be used to transmit any quantum 
state, one party to another via several intermediate nodes, securely on quantum communication 
network. The scheme makes use of the sequentially chained and approximate version of private 
quantum channels satisfying certain commutation relation of n-qubit Pauli operations. In this 
paper, we study the sequential structure, security analysis, and efficiency of the quantum sequential 
transmission (QST) protocol in depth. 
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I. INTRODUCTION 

One of the most popular quantum cryptographic prim¬ 
itives, except quantum key distribution, is the quan¬ 
tum secret sharing (QSS) protocols [HU]- The primitive 
known as QSS is a process of splitting a piece of quantum 
information into several parts, and then securely recon¬ 
structing the information, but certain subparts are not 
enough to restore the original quantum information. (In 
a strict sense, the secret sharing is different from the state 
sharing on its goal [2, but we treat the protocols as in 
the same category.) There are huge number of theoreti¬ 
cal studies on QSS protocols, and also exist experimental 
demonstrations on QSS schemes in continuous-variable 
regime, e.g.. Ref. ISIS]. 

Transmission or distribution of quantum information 
over several authorized nodes is essential for future ap¬ 
plications in quantum communications. We here review 
the original QSS scheme from the point of view of (ap¬ 
proximate) private quantum channels (PQC), and then 
propose an information transmission method, namely, e- 
secure quantum sequential transmission (QST) protocol. 
This protocol uses a concept of private quantum channel 
and aims to secure sequential transmission, where arbi¬ 
trary quantum states pass through several authorized in¬ 
termediate nodes (or participants). In the transmission 
process, all nodes must collaborate to reveal the orig¬ 
inal quantum information. In the sequentially chained 
scheme, we exploit the Pauli commutation relations on 
n-qubit quantum states, and derive the mathematical 
structure of multi-node e-randomizing maps. 

Using the idea of the general three-party QSS scheme, 
we construct our main protocol known as quantum se¬ 
quential transmission protocol under the security param¬ 
eter £. The parameter e implies that security and ef¬ 
ficiency of the protocols are dealt with an asymptotic 
consideration. Shortly speaking, the quantum sequential 
transmission protocol can transmit any quantum states 
from one party to another under the consent of all au¬ 
thorized participants with classical secret bits. Note that 
any input quantum states into a quantum channel are 
arbitrary quantum information with a given dimension, 
and we exclude classical information. Thus we expect 


that the protocol, QST, can be applied to certain ap¬ 
plications such as quantum repeater [6], quantum key 
repeater [7], quantum sealed-bid auction [S] or quantum 
email protocol, since only authorized users can send, con¬ 
firm, and read the quantum message. Furthermore, with 
the proposed schemes, we study the key question of find¬ 
ing minimal resources required to split and reconstruct a 
quantum state, and to transfer arbitrary quantum infor¬ 
mation sequentially. 

Let us briefly review the quantum one-time pad or pri¬ 
vate quantum channel (PQC). Ambainis et al. [3] first 
proposed a quantum primitive known as a private quan¬ 
tum channel for secure transmission of quantum states, 
and already proved its security including the optimal¬ 
ity [ini HI]. The complete randomization method natu¬ 
rally gave births to approximate approaches for random¬ 
izing quantum states We here adopt an approx¬ 

imate version of the Dickinson and Nayak’s PQC mi, 
which has relatively few Pauli operations on multi-qubit 
encodings. Using conventions and definitions in Sec. |I A[ 
we construct a quantum communication protocol that 
are efficient and secure with a small information leak¬ 
ages (e 1) notwithstanding minimal use of resources. 
But, in this paper, we mainly focus our attention on 
constructing the mathematical structure of the e-secure 
quantum sequential transmission scheme (QST). 

Before finishing the section, we introduce the basic con¬ 
cept of (approximate) PQC or e-randomizing map (or 
also known as random unitary channel). Moreover we 
comment on security analysis from Holevo bound and the 
correspondence between (classical) keys and Pauli opera¬ 
tions. In SectionjlT] we focus on our main construction of 
quantum sequential transmission protocol, which is one 
step more advanced form of the well-known three-party 
QSS, on multi-party system. In Section m we summa¬ 
rize and conclude our work. 


A. Background 

For a given d-dimensional Hilbert space C^, de¬ 

notes the space of bounded linear operators on the space 
and U{d) C B{C^) the unitary group on the space. 
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We make use of a quantum map from B{C^) to itself gen¬ 
erally known as a quantum channel. Then we can dehne 
a private quantum channel: For any e > 0, a completely 
positive and trace preserving (CPTP) map TZ : —>■ 

B{C'^) is said to be e-randomizing with respect to the 
trace norm if, for all quantum state p e B{<C‘^), 



< e, 

1 


( 1 ) 


where denotes the identity matrix of a given dimension 
d. The input quantum source p is a d-dimensional den¬ 
sity matrix. The map TZ satisfying Eq. Q is the approx¬ 
imate private quantum channel (APQCj, and ||M||i := 
trVM'^M denotes the trace norm for any matrix M. Note 
that the mapping TZ is perfect (or complete) randomizing 
map if e = 0. The definition with the security param¬ 
eter £ always implies perfect PQC, and gives us the in¬ 
formational security rather than a security based on the 
computational complexity. 

A simple way to create such an invertible encoding 
map is to choose a certain sequence of unitary operators 
Ui,, Us<fp G U(d) and define the encoding map as 


( 2 ) 

* i=l 

The index i corresponds to the number of shared secret 
bits that all communicating parties share. We here as¬ 
sume that the secret bits are unknown to any eavesdrop¬ 
pers or unauthorized parties. With a suitable choice of 
s unitary operators not more than d?, the mapping TZ 
satisfies to be an approximate private quantum channel. 
In fact, any orthogonal set of d^ unitary operations form 
a perfect private quantum channel. Notice that the di¬ 
mension d of our case is fixed to 2” to accommodate the 
Hilbert space of n qubits. 

If that is the case, how can we analyze the security of 
approximate private quantum channels? Roughly speak¬ 
ing, the accessible information to any attackers, for any 
quantum states p = PiPi supported on and de < 1, 
is bounded above by Holevo information [15] 

C d \ d 

Y2piTZ{pi)\ - ^pi5'(7^(p*)) 

< log(l -I- de) < de, 

where {pi,TZ{pi)} represents an ensemble of pi’s with 
probability pi’s through the quantum channel TZ, and 
S{p) := —trplogp, the von Neumann entropy. The 
above inequality is true because the dehnition of the 
e-randomizing map with respect to the trace norm in 
Eq. Q implies that the eigenvalues of the channel-output 
are almost uniformly distributed such that TZ{pi) ~ 
(1 -I- de)ld/d. This also means that attackers cannot 
obtain any information about the information of the en¬ 
semble {pi,TZ{pi)} under the condition de < 1. 


Finally, a relation between keys and Pauli operators is 
crucial in the proof of following protocol, so we carefully 
investigate the key correspondence. An explicit construc¬ 
tion for Eq. (i) depends on unitary operators chosen at 
random from the set of n-qubit Pauli matrices. For two 
n-bit strings a and 6, let a * 5 = mod 2 de¬ 

notes the standard inner product on Z^. We represent 
a tensor product of n single qubit Pauli operators by a 
string of 2n-bit K, (a,b) G {0,1}^”, by using the follow¬ 
ing correspondence 

K={a,b) : 

where <g) ■ ■ ■ (Z with AT 

and Z = ^ , and l = y/—! the imaginary number. 

Now, we dehne a set as 

{^a*bxazb . ^a,b) G {0,1}^”} C C/(2”) 

for all tensor products of n single qubit Pauli operators. 
Then the set P„ forms a basis for the 2" x 2" complex 
matrices. (Note that the set Pi = {I 2 , X, bXZ, Zj is 
the usual Pauli operators on single qubit.) For conve¬ 
nience we substitute to Pk under the correspondence 
in Eq. ([^ to emphasize a classical key K. 

As we mentioned above, n-qubit Pauli operators form 
a basis for the set of all 2” x 2” matrices. So, for a given 
density matrix p, we can construct that 

»>=4 E (4) 

(a,b)G{0.1}2'‘ 

where Ca^b is an element of a vector {ca^) in with 

llca.&lli < 2"’, and |jAr ||2 := VtrX'^X is the Frobenius (or 
Hilbert-Schmidt) norm on the space. 



II. QUANTUM SEQUENTIAL TRANSMISSION 
SCHEME 

With additional modihcation of QSS [TJ [ini [IT] and 
approximate private quantum channels, we now propose 
a quantum transmission protocol of so-called e-secure 
quantum sequential transmission (QST) scheme. The 
main objective of our task is to send a unknown quan¬ 
tum information from a sender to a receiver when sev¬ 
eral authorized intermediate nodes exist. Although the 
quantum information is transmitted sequential ways on 
concatenated quantum channels, the crucial advantage 
of this protocol is to preserving its explicit security and 
efficiency. In the sequential structure, we take the gener¬ 
alized n-qubit Pauli commutation relations on any input 
quantum signal, and prove the mathematical consistency 
and security of the chained e-randomizing maps. 

As in three-party QSS protocol, suppose that, for all 
Ath position, Alice, Bob and Charlie share a correlation 








oiEc {0,1}2", if 
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FIG. 1: Approximate m-party quantum sequential transmis¬ 
sion protocol: By using a secret classical information K, a 
sender transmits any quantum state p securely to final node 
through the m — 1 and e-randomizing maps R-Ej for all j. 
Boxes with Pk represent the n-qubit Pauli operations corre¬ 
sponding a key K. 


key such that kf 0 fcf © fcf = mod 2, where ai is 
fixed to 0 under the mod 2 operation. The main purpose 
of this protocol is to securely transmit a quantum state 
from Alice to Charlie through a middle party Bob. The 
transmitted state between Alice and Charlie is asymptot¬ 
ically secure since the 2n-bit-key-based PQC makes ar¬ 
bitrary n-qubit state into a near maximally mixed state 
(in three-party scenario). Extending the idea of three- 
party protocol, we can directly generalize it to an m- 
party concatenated-transmission protocol within n-qubit 
Pauli commutation relations. 

First, we simply take account of three-party protocol 
for sequential quantum state transmission. Alice pre¬ 
pares an n-qubit quantum state |<i)) G ) and en¬ 

codes the state to |d>) which will be transmitted to 
Bob. (Consideration of only pure states is enough since 
the convexity of trace norm ensures the previous state¬ 
ment.) Bob also encodes the state, by using the cor¬ 
relation key , to P^b o P^^a |$) where o denotes a 
composition of two Pauli sets, and sends the state to the 
third party Charlie. Remember that kf (Bkf (Bk^ = ai, 
so the receiver Charlie efficiently decodes the state to 
original quantum information 

Pkc o Pj^b o Pj^a 1 $) = 1 $). ( 5 ) 


Bias{E, (a, b)) 




(7) 


then we call the set E is biased with respect to a string 
(a, 6) G {0,1}2" [HITH], where E is an expectation value 
for some variable in E. Note that * is also the inner 
product, and the bias is equal to 2¥.e [x* (a, &)] — 1 under 
the modulo 2 operations. When, for all {a,b) 
Bias{E,{a,b)) < (}, we call the subset E C {0, to 
be /3-biased. 

A subset E C {0, defines a CPTP map on n-qubit 
as follows, 

' ' (u,v)eE 

= ^ E c„.6A“Z’^(A“Z'>)Z"A“ 

(it,!)),(a,6) 

= ^ E Ca,bPa,bX^Z\ (8) 

(a,b)G{0,l}2" 

where a real number \l5a,b\ is equal to the Bias{E, (a, b)) 
in Eq. 0- The modulus of E, \E\, corresponds to some 
number s(< 2^") of n-qubit Pauli operations used in the 
map TZe- By using commutation relations on Pauli ma¬ 
trices, above equations can be derived from 

A“Z’'(A“Z'’)Z’'X“ = l^_iY*'’+b*nx<^z^ (9) 

=: l3a,bX^Z\ 


If we choose E = {0,1}^", then we have a completely 
randomizing map. It is known that there exists a map 
??.£; an e-randomizing map with respect to the trace norm 
for n-qubit states, when the subset E C {0,1}^" be a 
set with bias at most e • 2“"’/^. (See also the proof in 

Ref. [13] ■) 

From the existence of small /3-bised subset E, the 
Frobenius norm of the randomized state is almost con¬ 
centrated at the maximally mixed state, that is. 


In Eq. 0. we use the following identity, for any Pauli 
operators. 


l|7^i^(p)||^< 


1 + 
2” 


( 10 ) 


PrC O P^b O Pf^A — mod 2 — Pq l2"- 

( 6 ) 

This condition for (complete) private quantum channel 
needs exactly 2n secret bits. But if we use the approxi¬ 
mate case of PQC, then we need about half-size (« n-bit) 
keys only instead of 2n-bit keys HKH, i.e., for suffi¬ 
ciently large d it satisfies our security level with small 
e. 

As shown in Fig.[^ m-party extension (m > 3) of QST 
scheme is simple and natural, but we need some technical 
calculations as shown below. We note that every inter¬ 
mediate user also accomplishes the role of sender and 
receiver. Before describing the m-party scenario, we de¬ 
fine a bias of a set of 2n-bit strings. For a given subset 


This inequality can be directly calculated from the 
Eq. ^ of e-2“”/^-biasedness and the bound ||ca,f ,||2 < 2”. 

Moreover, for any density matrix N G S(C^ ), the 
inequalities ||A^||i < ■ ll-^lb and — 

2” • II-^11 2 ~ 1 always hold. (See proof details in the ap¬ 
pendix A of Ref. [14].) Thus we obtain the following 
chain bounds 


P-Eip) 



< < £. 


( 11 ) 


Thus, if we can choose a suitable subset E with /3- 
biasedness, then we can always create e-randomizing map 
or APQC in trace norm. The above equation, Eq. 0, 
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is intrinsically identical to the Eq. Q, therefore the se¬ 
curity is well preserved. 

Finally we show that multi-party approximate private 
quantum channel and multi-party quantum sequential 
transmission protocol is secure and efficient, i.e., we claim 
that udn '■= n + 2 log j + 4 classical keys are sufficient 
for the TO-party QST scheme. By choosing a dense subset 
E, we can initialize a subset Ej C {0,1}^" to be a set 
with bias at most for each j [12]. Then we 

assert that there exists an m-party e-randomizing map 
with respect to the trace norm for n-qubit states: For 


any density matrix p G jB(C^ ), we have 


o TZe^_i o • • • o TZei {p) 



( 12 ) 


We here denote that TZt = E-e^ ° ° E-Ei for conve¬ 

nience. Since the m-user encoding and transmitting for 
a quantum state under m-APQC form an m-party QST 
protocol, and it can be directly derived from the following 
commutation relation 




(13) 


This equation is just a generalization of Eq. ffl. Sup¬ 
pose that, for every quantum state p G each 

e-randomizing map between two nodes (j, j -I-1) satisfies 


7lj(p) - 




(14) 


then we can always construct multi-user QST protocol 
via approximate private quantum channels with 


^t(p) - ^ 


< £, 


(15) 


and consume about n bits of secret classical keys satisfy¬ 
ing 0)!li = 0. This result implies that QST based 

on sequential private quantum channels is secure. The 
estimation of Eq. (151 for every e promises to use the 
classical key of n -I- 2 log j + 4 bits [T3] . Notice that Dick¬ 
inson and Nayak’s efficient construction for the approx¬ 
imate PQC on n-qubit situation relies on McDiarmid’s 
inequality in probability analysis and a net argument on 
discretizing pure quantum states. Strict security analy¬ 
sis for the approximate private quantum channel in se¬ 
curity parameter e are reported at Ref. m, and see also 
Ref. 12^. 


III. CONCLUSION 

In summary, we constructed a quantum communica¬ 
tion protocol for quantum sequential and e-secure trans¬ 
mission scheme via the extension of three-party QSS task. 


This scheme makes use of a relatively small (correlated) 
classical secret information of about udn — n bits, just 
half of the size or the perfect private quantum channel 
of 2n-bit, and transmit any n-qubit states securely, so 
we say that the protocol is efficient. The security argu¬ 
ment only depends on the small security parameter e in 
which an approximate private quantum channel guaran¬ 
tee its security. In fact, it is a small value (e < 1) for 
sufficiently large d-dimension of Hilbert space 

Beyond the mathematical construction of the quantum 
sequential transmission scheme, we need to exploit this 
type of communication protocols for potential future ap¬ 
plications such as quantum (key) repeater, auction, and 
email scheme and so on. So, the analysis of these proto¬ 
cols in quantum regime is significant and necessary. We 
finally point out that the security of the QST protocol 
must be systematically analyzed for several cases of at¬ 
tackers, and further study is needed for mathematical 
generalization in p-norm cases (for all p > 1). We hope 
that the quantum sequential transmission, QST, can be 
used for the realization of practical quantum communi¬ 
cation networks. 
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